Supermarket 3.1.34 was released today and is available for download at https://downloads.chef.io/supermarket. This release contains a security update and is recommended upgrade.
Security Updates
- update nokogiri to address CVE-2017-9050 #1674 (robbkidd)
- update embedded libxml2 and libxslt #1676 (robbkidd)
These updates collectively address the following CVEs:
- CVE-2017-0663
- CVE-2017-7375
- CVE-2017-7376
- CVE-2017-9047
- CVE-2017-9048
- CVE-2017-9049
- CVE-2017-9050